Sophos XG V18.5.380 MR2 - Base License only. Unable to access Admin Page via WAN after Upgrade

RE: Sophos XG V18.5.380 MR2 - Base License only. Unable to access Admin Page via WAN after Upgrade

GavinDaniels — Tue, 11 Jan 2022 02:07:48 GMT

Hey,

Was working with support regarding this, and the issue has been located.

It is to do with a pending compulsory password reset on the admin account.

Basically looking to get some diagnostic logs, and logging into the console was rejecting the password. So Logging into the firewall from the LAN side and checking the password and the Sophos responded wanting a compulsory password reset for the Admin Account.

After completing the password reset, I was able to SSH into the unit, and also the WAN access to the Admin Interface began working also.

I have tested this with a second unit showing the same issue, and the result was the same.

So something updated in 18.5.2 will stop the WAN access to the admin page, and deny SSH access if there is a compulsory password reset for the admin account.

RE: Sophos XG V18.5.380 MR2 - Base License only. Unable to access Admin Page via WAN after Upgrade

GavinDaniels — Mon, 03 Jan 2022 10:26:16 GMT

Hey LuCar,

I'll look at this, and try it out. But I did have issues with Central Management the first time I did a device upgrade.

But still the underlying issue of the Web Admin access not working needs to be addressed.

Regards

Gavin

RE: Sophos XG V18.5.380 MR2 - Base License only. Unable to access Admin Page via WAN after Upgrade

LuCar Toni — Mon, 03 Jan 2022 09:53:48 GMT

Basically you can enable Central Management for all Appliances. Base License is sufficient for this. And you would have access to the webadmin as well.

RE: Sophos XG V18.5.380 MR2 - Base License only. Unable to access Admin Page via WAN after Upgrade

GavinDaniels — Mon, 03 Jan 2022 09:50:55 GMT

Hello LuCar

The unlicensed unit does not have Central Management, and I have not tried with Central Management,

While I do not have the WAN port open always, what I generally do is enable it when I am doing maintenance or VPN upgrades as a backup and then disable when works are complete.

Which is how I have found that this has stopped working.

Regards

Gavin

RE: Sophos XG V18.5.380 MR2 - Base License only. Unable to access Admin Page via WAN after Upgrade

LuCar Toni — Mon, 03 Jan 2022 08:50:31 GMT

Do you have Central Management and this also resolve into access denied?
BTW: I would HIGHLY recommend not to open Webadmin to WAN.